PRIVACY-NOTICE

How information is handled before and during an enquiry.

This page describes the current site and scoping workflow. Before production release, the responsible legal entity, contact details, legal bases, transfer terms, and retention periods must be completed and approved for the applicable law. Missing facts are never inferred.

01

Information submitted through the site

The scoping workflow asks for business contact details, organization, assessment objective, asset description, roles and tenants, access model, environment, target date, third parties, safety constraints, and the requester's authority attestation. The site may also receive ordinary technical data needed to deliver pages and protect the service.

02

How the information is used

Information supports fit review, a structured scope draft, authority and ownership checks, safe access planning, and a human decision about next steps. Submitting the form does not start testing, create a contract, or send a proposal automatically.

03

Access, partners, and AI tools

Access to operating information is role- and engagement-bound. A partner does not receive client identity, targets, or findings before a valid assignment. Client-bound AI use requires current authorization for the context, data class, and provider, and output remains a draft for human review.

04

Retention, deletion, and requests

The site does not promise one universal retention period. Retention must be set by record type, engagement, legal duties, and security needs, with a recorded deletion process. Access, correction, deletion, or objection requests are assessed after identity verification and under applicable law.

CONTACT

How to begin a request

Use the contact page to select the appropriate route. Do not include passwords, findings, or sensitive evidence in the request.

Open the contact page
05

What production release still requires

A binding notice requires professional approval of the legal entity, jurisdictions, party roles, suppliers and subprocessors, processing locations, transfer mechanisms, retention periods, rights, contact channels, and complaint procedure. Until then, this is a transparent operating description, not a substitute for legal advice.

NEXT DECISION

Have a question about information handling?

Use the contact page to choose the right route without attaching secrets or sensitive assessment material.

Contact route